90978f575273463f9710d748f0d46e03a73280feaedb8b695430ff65d219037d

Sharing

Copy URL Twitter E-mail

General

Target

90978f575273463f9710d748f0d46e03a73280feaedb8b695430ff65d219037d
Size

557KB
MD5

a48a97309760f41b340c755bc43706c8
SHA1

4e12d8436b294a3112c6ca3772f655ef2695a995
SHA256

90978f575273463f9710d748f0d46e03a73280feaedb8b695430ff65d219037d
SHA512

4a65d65c23fc7c638c2181e754da75d09ba3a07c5869ed8bdc34b1e5d0924a2ffdda855b4724972bfdc4545f77f1a302f80420f631e6cda51ced9eed1fd7e7de
SSDEEP

12288:hHp1g1g0Rq3n1asUpgNPu12atqKwuytHZLEC:hMfRon1asoSpKqKFBC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90978f575273463f9710d748f0d46e03a73280feaedb8b695430ff65d219037d

Files

90978f575273463f9710d748f0d46e03a73280feaedb8b695430ff65d219037d
.exe windows:5 windows x86 arch:x86

40585a2830158a9dd30dce20d7448027

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobObjectW
CreateHardLinkA
GetProcessPriorityBoost
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
GetNumberFormatA
EnumTimeFormatsW
EnumResourceTypesA
GetConsoleCP
GlobalAlloc
GetSystemDirectoryW
SetFileShortNameW
LoadLibraryW
IsProcessInJob
FatalAppExitW
IsBadCodePtr
SetVolumeMountPointA
HeapValidate
GetModuleFileNameW
ReplaceFileA
LCMapStringA
GetLastError
SetLastError
GetProcAddress
SetEnvironmentVariableW
PeekConsoleInputW
CreateNamedPipeA
VerLanguageNameW
LoadLibraryA
CreateFileMappingA
SetConsoleCtrlHandler
AddAtomA
HeapWalk
GetOEMCP
EnumDateFormatsA
GetModuleHandleA
EnumResourceNamesA
SetProcessShutdownParameters
GetDiskFreeSpaceExA
LCMapStringW
HeapSize
WriteConsoleW
FlushFileBuffers
SetStdHandle
EnumCalendarInfoW
LocalCompact
WriteConsoleInputW
GlobalCompact
FindVolumeMountPointClose
CreateFileA
CreateFileW
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapAlloc
ExitProcess
SetFilePointer
HeapCreate
HeapFree
CloseHandle
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
Sleep
RaiseException
GetConsoleMode
RtlUnwind
ReadFile

user32

GetMessageExtraInfo
ChangeMenuA
GetMenu
DrawStateW
GetSysColorBrush
DrawMenuBar
SetCaretPos
CharUpperBuffA

gdi32

GetCharWidthI
CreateDCA
GetCharABCWidthsI

advapi32

RegisterEventSourceW

msimg32

AlphaBlend

Sections

.text
Size: 437KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 36.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naxahuy
Size: 1024B - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.silob
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40585a2830158a9dd30dce20d7448027

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msimg32

Sections

.text Size: 437KB - Virtual size: 437KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 56KB - Virtual size: 36.0MB

.naxahuy Size: 1024B - Virtual size: 723B

.silob Size: 1024B - Virtual size: 1024B

.rsrc Size: 46KB - Virtual size: 45KB

.text
Size: 437KB - Virtual size: 437KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 56KB - Virtual size: 36.0MB

.naxahuy
Size: 1024B - Virtual size: 723B

.silob
Size: 1024B - Virtual size: 1024B

.rsrc
Size: 46KB - Virtual size: 45KB